CVE-2004-0965 in HP-UX

Sumário

de VulDB • 09/06/2026

stmkfont in HP-UX B.11.00 through B.11.23 relies on the user-specified PATH when executing certain commands, which allows local users to execute arbitrary code by modifying the PATH environment variable to point to malicious programs.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Reservar: 19/10/2004
• Divulgação: 09/02/2005
• Moderação: aceite
• Entrada: VDB-23929
• CPE: pronto
• CWE: CWE-119 (confirmado)
• CVSS: 9.3 (VulDB)
• EPSS: 0.00657
• KEV: não
• Atividades: muito baixo
• Sector: Telecommunication, Finance, ...

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2004-0965
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2004-0965
• CVE Details: https://www.cvedetails.com/cve/CVE-2004-0965/